This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/Uc8J9mXAeOJT6T8Cc2pg7ur7EVE.roa File: Uc8J9mXAeOJT6T8Cc2pg7ur7EVE.roa (raw, json) Hash identifier: GBBdZarUNSiLkjjpGT6+8iJpn2p2RM8BoqoVzDBwtCw= Subject key identifier: 51:CF:09:F6:65:C0:78:E2:53:E9:3F:02:73:6A:60:EE:EA:FB:11:51 Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1 Certificate serial: 019B7758C9E52A3BFF76AE4C42C77FE5196E Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/Uc8J9mXAeOJT6T8Cc2pg7ur7EVE.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35129 IP address blocks: 88.135.0.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c9:e5:2a:3b:ff:76:ae:4c:42:c7:7f:e5:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51cf09f665c078e253e93f02736a60eeeafb1151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:6a:16:4a:05:15:4b:bb:e8:46:df:ad:fc: fe:3d:7a:7f:d8:c4:6a:e0:56:b3:7a:72:63:4c:d5: 72:d8:4d:f3:37:5f:fd:58:3c:46:9f:42:66:a1:4d: 00:2b:a9:0e:b1:6d:4f:eb:81:ba:b3:40:b5:f6:a8: dc:62:9d:be:81:a8:41:c6:50:6c:66:cb:e8:b3:44: 1e:c6:df:a7:85:e9:f7:59:7b:28:74:50:f8:04:df: c6:38:9a:cd:cb:e5:9f:54:0a:ad:7c:f6:1e:53:cf: 9e:75:70:99:60:f2:9f:bc:3a:28:43:d5:82:b6:76: b7:de:bc:d5:70:cf:c2:c0:c6:ad:2a:33:9b:0b:37: ce:75:93:7c:1a:22:ec:0d:c0:0d:ac:f8:12:94:e4: dd:90:0a:52:63:69:dd:86:f4:f2:38:9d:a3:fd:72: ed:c8:45:bb:c2:d5:c1:af:f5:6f:59:42:e4:36:a6: 36:44:82:6f:5c:dc:8f:03:bf:11:30:74:1e:69:cf: dd:98:fc:f5:54:42:f2:4f:af:ea:12:b8:88:06:d4: 2f:29:71:8f:9c:53:d2:c4:da:03:1a:22:02:c1:aa: ab:d9:65:90:a2:00:6a:15:fa:c7:88:78:ed:8f:5c: ea:59:22:88:a9:20:d7:74:1e:e2:08:ba:db:60:c1: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CF:09:F6:65:C0:78:E2:53:E9:3F:02:73:6A:60:EE:EA:FB:11:51 X509v3 Authority Key Identifier: keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/Uc8J9mXAeOJT6T8Cc2pg7ur7EVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.0.0/20 Signature Algorithm: sha256WithRSAEncryption c3:57:a8:09:d6:50:b6:24:e8:4e:ab:3f:e2:fa:b5:3d:1b:f8: a1:56:66:45:43:34:86:13:95:d4:1c:33:1e:67:ef:74:6a:50: 9c:fe:2c:ca:97:6e:3c:ee:ca:be:5e:15:11:29:f7:69:a8:a6: a5:42:d7:08:07:51:44:7d:50:78:5a:53:30:f3:51:b8:6a:ba: b1:9d:3a:15:b2:4f:81:80:d0:69:e3:53:0f:aa:ed:f5:9a:bf: 4b:52:23:3d:a1:58:d4:54:bf:ac:2d:8f:cd:e8:8f:0b:a2:67: 66:ac:f9:9d:ba:8a:51:69:c5:b8:96:f2:86:87:0c:d7:fb:35: e4:f1:3a:e5:ab:ad:68:bd:82:79:27:60:7e:d6:dc:eb:eb:54: 21:39:14:fd:76:24:ce:90:15:36:1e:6a:00:81:62:40:42:e2: d4:55:76:e3:98:a6:24:8d:ed:88:01:be:38:04:f2:fa:a5:cc: 59:a3:37:86:12:5d:26:79:72:aa:6a:56:42:80:8a:e3:19:94: 91:1e:75:af:ba:ce:cb:9f:e2:cb:28:ef:4a:79:cb:df:c6:5a: d3:d8:38:76:9a:8a:cd:67:15:f4:a1:0a:80:08:c3:46:86:46: c3:9c:13:ab:34:d7:7c:c9:c0:ec:48:19:2a:d8:64:7b:46:62: 1e:c9:c0:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMnlKjv/dq5MQsd/5RluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNTlhNWNjNjFmZWJkYjkxNmQ0NjI0YmJlOGMxMDg5NzM1 M2IwYzEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWNmMDlmNjY1YzA3OGUyNTNlOTNmMDI3MzZhNjBlZWVhZmIxMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiFqFkoFFUu76Ebfrfz+PXp/2MRq 4FazenJjTNVy2E3zN1/9WDxGn0JmoU0AK6kOsW1P64G6s0C19qjcYp2+gahBxlBs Zsvos0Qext+nhen3WXsodFD4BN/GOJrNy+WfVAqtfPYeU8+edXCZYPKfvDooQ9WC tna33rzVcM/CwMatKjObCzfOdZN8GiLsDcANrPgSlOTdkApSY2ndhvTyOJ2j/XLt yEW7wtXBr/VvWULkNqY2RIJvXNyPA78RMHQeac/dmPz1VELyT6/qEriIBtQvKXGP nFPSxNoDGiICwaqr2WWQogBqFfrHiHjtj1zqWSKIqSDXdB7iCLrbYMFOGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHPCfZlwHjiU+k/AnNqYO7q+xFRMB8GA1UdIwQY MBaAFHpZpcxh/r25FtRiS76MEIlzU7DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iMWFiMWItMGU5NS00YzNjLTg3Njgt OTAzZDA4MzQ5NmU1LzEvVWM4SjltWEFlT0pUNlQ4Q2MycGc3dXI3RVZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9iMWFiMWItMGU5NS00YzNjLTg3NjgtOTAzZDA4MzQ5NmU1 LzEvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWIcAMA0G CSqGSIb3DQEBCwUAA4IBAQDDV6gJ1lC2JOhOqz/i+rU9G/ihVmZFQzSGE5XUHDMe Z+90alCc/izKl2487sq+XhURKfdpqKalQtcIB1FEfVB4WlMw81G4arqxnToVsk+B gNBp41MPqu31mr9LUiM9oVjUVL+sLY/N6I8LomdmrPmduopRacW4lvKGhwzX+zXk 8Trlq61ovYJ5J2B+1tzr61QhORT9diTOkBU2HmoAgWJAQuLUVXbjmKYkje2IAb44 BPL6pcxZozeGEl0meXKqalZCgIrjGZSRHnWvus7Ln+LLKO9KecvfxlrT2Dh2morN ZxX0oQqACMNGhkbDnBOrNNd8ycDsSBkq2GR7RmIeycBG -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:04 2026 by rpki-client